General
-
Target
2024-02-14_b204561613ded8dbc92513a59b4120af_mafia
-
Size
467KB
-
Sample
240214-lqytcsgc42
-
MD5
b204561613ded8dbc92513a59b4120af
-
SHA1
65d901c51845d1fd21be0681579e01cf35b153fc
-
SHA256
02fce0fcfad3a59e5d2bc30c8d0e8fecadfef3f0782c1c17e1b781139a5c4ea2
-
SHA512
53b96edfbb6bcea633cd2553bd8c689a61810ddb835b6442a1adf97f7b4c846783cfe2c87d77b4746bff3578662f1b1f8a9934c5a665e93cdc139e318775e931
-
SSDEEP
12288:Bb4bZudi79LK4qHx3EiLQeEVrox/bQd+VHAk:Bb4bcdkLKLxUiLjCoxUdU
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_b204561613ded8dbc92513a59b4120af_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-14_b204561613ded8dbc92513a59b4120af_mafia.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-14_b204561613ded8dbc92513a59b4120af_mafia
-
Size
467KB
-
MD5
b204561613ded8dbc92513a59b4120af
-
SHA1
65d901c51845d1fd21be0681579e01cf35b153fc
-
SHA256
02fce0fcfad3a59e5d2bc30c8d0e8fecadfef3f0782c1c17e1b781139a5c4ea2
-
SHA512
53b96edfbb6bcea633cd2553bd8c689a61810ddb835b6442a1adf97f7b4c846783cfe2c87d77b4746bff3578662f1b1f8a9934c5a665e93cdc139e318775e931
-
SSDEEP
12288:Bb4bZudi79LK4qHx3EiLQeEVrox/bQd+VHAk:Bb4bcdkLKLxUiLjCoxUdU
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-